Escape filename passed into ctags

[victorhuangwq]

[damianhxy]

We ought to sanitize the handin file path in general (perhaps by taking inspiration from github_integration.rb's ALLOWED CHARS)

Possible exploit vectors include user email and handin filename